Vetoing actions

You can make some actions of a module not available for a role. Just edit the role, select the module to restrict and check the actions to exclude:

In this case the New and Save actions will not be available in the module Author for the users of role user. From now on you have fine grained security without creating multiple modules with different controllers for the same entity. This feature is only available in the Professional and Enterprise editions. The LITE edition has no roles and modules management.